Senior ServiceNow SecOps Business Analyst

About the Role
We are looking for a Senior ServiceNow SecOps Business Analyst to lead requirements gathering and process design for ServiceNow Security Operations (SecOps). You will work closely with security teams, SOC analysts, and technical consultants to turn security processes into effective ServiceNow solutions across Security Incident Response, Vulnerability Response, and related modules. This role requires hands-on business analysis experience on ServiceNow Security Operations (SecOps) implementations and will be onsite in Dubai.

Responsibilities

• Run workshops with security, SOC, and IT stakeholders to gather and document business requirements.
• Analyse current security processes and design future-state workflows in ServiceNow SecOps.
• Write clear user stories, acceptance criteria, process flows, and functional specifications.
• Map requirements to ServiceNow SecOps capabilities: Security Incident Response (SIR), Vulnerability Response (VR), Configuration Compliance, and Threat Intelligence.
• Work with technical consultants and developers to ensure solutions meet business needs.
• Support integration requirements with security tools (SIEM, vulnerability scanners, EDR).
• Define security KPIs, SLAs, dashboards, and reporting requirements.
• Support UAT planning and execution, training, and change management.
• Manage the backlog and prioritize requirements with product owners.
• Act as the main link between business, security, and technical teams.

Requirements

• 6+ years of experience as a Business Analyst, including significant experience on ServiceNow.
• Must have hands-on business analysis experience on ServiceNow SecOps (SIR and/or VR) implementations.
• Strong understanding of security operations processes: incident response, vulnerability management, threat intelligence, SOC workflows.
• Knowledge of security frameworks such as NIST, ISO 27001, and MITRE ATT&CK.
• Experience writing user stories and functional specifications in Agile environments (Jira, ServiceNow Agile).
• Familiarity with security tools such as Splunk, QRadar, Microsoft Sentinel, Qualys, Tenable, Rapid7, or CrowdStrike.
• Excellent communication, workshop facilitation, and stakeholder management skills.
• Bachelor’s degree in IT, Computer Science, Information Security, or a related field.

Nice to Have

• ServiceNow certifications: CSA, CIS – Security Incident Response, CIS – Vulnerability Response.
• Business analysis certifications (CBAP, CCBA, PMI-PBA).
• Experience in banking, government, or other regulated sectors in the UAE/GCC.
• Arabic language skills.